CTI status
As of:
Last pipeline run:
Source reliability
Information credibility
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
The report describes an active supply-chain attack via a compromised ConnectWise Cloud Backup credential that allows attackers to directly breach Microsoft 365 tenants.
The attack shows that compromised application identities at a backup provider can lead directly to Microsoft 365 tenant takeover, making supply-chain risk a matter of delegated cloud permissions, not just software.
The BSI WID reports multiple vulnerabilities in Synology DSM without CVE or exploitation status; for operators, the patch status of the NAS operating system is relevant.
The alert does not provide CVE IDs, versions, or exploitation status, and therefore adds no concrete patch information beyond general browser hardening.